Huge news!Announcing our $20M Series A led by Andreessen Horowitz.Learn more →
Git dependency
Severity
Critical
Description
Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.
Suggestion
Publish the git dependency to npm or a private package repository and consume it from there.
Packages with this issue
10up-toolkit
Collection of reusable scripts for 10up development.
nicholasio
published 5.2.0 • angular-rrule-recurring-select
Recurrence editor
mchapman
published 0.1.1 • arbundles
Arweave bundling library
jessetherobot
published 0.6.22 • baileys-md
WhatsApp API
zeeoneofc
published 5.0.5 • baileysssss
WhatsApp API
kazedevid
published 4.4.5 •